KSD Unified Auth Platform
A unified identity and authorization hub for in-house systems. It provides OAuth2 / OIDC single sign-on, application onboarding, a user directory and audit logs, so every internal system shares one account.
Key Features
Single Sign-on
Log in once and move between systems without re-entering credentials; sessions and logout stay consistent.
Open Standards
Implements the OAuth2 authorization code flow and OIDC so third-party apps can onboard quickly.
Apps and Permissions
Manage the application list, redirect URIs and access policy in one place, with auditable change history.
Background
Internal systems each maintained their own accounts, so staff changes meant editing permissions system by system and audit trails never joined up. As the authentication hub, it centralises identity and authorization; onboarding a new system is just registering an OAuth client.
Tech Stack
Mobile Entry
Mobile browsers are redirected to the PWA automatically, so authentication stays smooth on a phone.
Security Posture
The backend listens on loopback only and Nginx terminates TLS; secrets and user data are stored separately.